openSUSE-SU-2026:22128-1
openSUSE-SU-2026:22128-1 · Security update for libxls
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
This update for libxls fixes the following issues: Changes in libxls: Update to release 1.6.4: * Fix use of uninitialized memory in OLE parsing [boo#1267687, CVE-2026-26825] * Fix use of uninitialized memory in read_MSAT [boo#1267608, CVE-2026-26824] * Fix use of uninitialized memory in xls_parseWorkBook * Fix out-of-bounds reads in the formula dumper * Handle allocation failures in OLE, workbook and string code * Read SummaryInformation streams at their real size * Keep full precision when converting numeric cells to strings * Fix "creation of UTF-8 locale failed" in xls2csv Update to release 1.6.3: * Fix style record size check on big-endian systems * Fix header include in C++ mode * Fix buffer overflows when parsing style records * Fix infinite loop with self-referencing sectors
Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
libxls openSUSE:Leap 16.0
- Betroffene Versionsbereiche
- ECOSYSTEM: < 1.6.4-bp160.1.1
Auf 1.6.4-bp160.1.1 aktualisieren